The safe share project John Chapman, Deputy head, information - PowerPoint PPT Presentation

The safe share project John Chapman, Deputy head, information security, Jisc

The safe share project • What : a pilot project enabling the secure exchange of data collected by Government and the NHS using an encrypted overlay over the Janet network to facilitate appropriate analysis between project sites • AND reusing existing services to increase authentication for researchers • Why: easier, secure access to research data to further knowledge of diseases and ill health to improve medical treatments in the long-term • When : running from November 2014 – March 2017 The safe share project 2

The safe share project Background • Substantial investment in medical and administrative data research to generate benefits to society from the appropriate analysis of data collected by Government and the NHS • E.g. to further knowledge e.g. of disease and ill health to improve medical treatments Challenges • Health data, and other routinely collected data on people’s lives, are very personal and sensitive • Significant numbers of ethical, consensual and practical hurdles to making appropriate use of the sensitive data for research The safe share project 3

The safe share project Drivers • Requirement for connectivity to move and access electronic health data securely • Challenge to give public confidence that data is appropriately protected • Provide economies of scale in secure connectivity The safe share project • Jisc management and funding of £960k to pilot potential solutions with the aim of developing a service in 2016/17 The safe share project 4

Partners University of Bristol Cardiff University University of Edinburgh The Administrative Data Research Network Francis Crick Institute University of Leeds St Andrews University University of UCL Edinburgh University of Manchester University of Leeds University of Oxford University of Manchester University of St Andrews University of Southampton University of Oxford UCL Francis Crick Institute Cardiff University University of Bristol Swansea University Swansea University University of Southampton The MRC Medical Bioinformatics initiative The Farr Institute The safe share project 5

The safe share project Authentication, Authorisation and Accounting Infrastructure (AAAI) Use Cases: • HeRC, N8 HPC – access between facilities using home institution credentials • eMedLab – partners will be able to use a common AAAI to access this new system (for analysis of for instance human genome data, medical images, clinical, psychological and social data) • Swansea University Health Informatics Group – investigating Moonshot as an authentication mechanism to allow use of home institution credentials • University of Oxford: to enable researchers to use home institution credentials for authentication to request access to datasets for studies e.g. into dementia The safe share project 6

Safe share AAAI » AAAI project is using Assent - Allowing you to effectively manage and control access to a wide range of web and non-web services and applications About Assent » Using Assent gives your staff and partners access to a wide range of services including cloud infrastructures, high performance computing, grid computing and commonly deployed services such as email, file store, remote access and instant messaging. » Assent uses the technology developed through our Moonshot project to enable single-sign on capability within, across and between organisations, where secure communication is ensured. Approved now as an international standard. » Assent extends the range of applications and services that can consume federated identity and improves the security of your services by controlling access to resources. It builds on existing RADIUS and SAML based technologies that underpin eduroam and the UK Access Management Federation services. 10/06/2016 The safe share project 7

Safe Share AAAI HPC Pilot: • Leeds deployed Moonshot infrastructure, Manchester deploying soon – then testing use of Assent to log in to N8 facility. Swansea University: • Looking at the use of Assent as part of the Open Stack infrastructure for the Cloud Infrastructure for Microbial Genomics (CLIMB) project with Universities of Cardiff, Birmingham and Warwick. Work recently completed on providing compatibility between Moonshot and Centos7 meaning development work can now start with CLIMB – planning an AAAI workshop in July. eMedLab: • Technical workshop in November to investigate requirements. • eMedLab is working to get into a production-ready state this year and will then look to pilot use of Assent. University of Oxford: • Planning to learn from the other pilots first before applying a solution to a dementia project 8

The safe share project Secure connectivity with a higher assurance network (HAN) Use Cases: • Inter-Farr – initial trial between 2 Farr facilities • Intra-Farr – to support the ALSPAC project between Swansea and Bristol • ADRC – connectivity between accredited secure rooms that can be connected to ADRC data centres for remote working • PSN – extending the reach of the Public Services Network The safe share project 9

The safe share project Example “service slice”: Farr Institution LAN Safe share core Janet, internet or other network safe share router at edge Farr trusted environments The safe share project 10

The safe share project Example “service slice”: Farr Institution LAN Safe share core Janet, internet or other network safe share router at edge Farr trusted environments The safe share project 11

The safe share project: HAN design overview 10/06/2016 The safe share project 12

The safe share project: latest • Safe share routers supplied to St Andrews, Southampton, Cardiff, Swansea and Manchester Universities • Testing to start soon • Public Services Network • Preparing for ISO27001 and Official accreditation 10/06/2016 The safe share project 13

The safe share project • Enabling the secure exchange of data collected by Government and the NHS using encrypted overlay over the Janet network to facilitate appropriate analysis between project sites • Working together to further knowledge of diseases and ill health to improve medical treatments in the long-term • Running from November 2014 – March 2017 • Find out more: https://jisc.ac.uk/rd/projects/safe-share https://community.jisc.ac.uk/groups/safe-share-project #jiscsafeshare 14